Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

Howto check if SPAMer will be recognized by IronPort?

Last week, we had a mail-flood from one german sender. We sent this SPAM-Mail to IronPort and on the same time, we added a content-filter especially for this sender (work perfect).

In the mail-logs, I can see the last entry of this sender before the content-filter was updated.

How can I check now, if this sender-adress is recognized by IronPort as SPAM? Is there a logfile for the content-filter where I can check if this address is still active?

How do you manage such a situation?

New Member

Re: Howto check if SPAMer will be recognized by IronPort?

You can search your mail logs for the sender address. When you find a message ID (MID) that is associated with that sender you can check if that MID was found to be spam positive or if it hit the content filter.

This will work because the spam scan is done before content filters.

CreatePlease to create content